Zoom VDI Meeting Client < 5.16.10 Vulnerability (ZSB-24008)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.16.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-24008 advisory. - Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for...

Zoom Client for Meetings < 5.16.5 Vulnerability (ZSB-23059)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.16.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-23059 advisory. - Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an...

Zoom Client for Meetings < 5.17.0 Vulnerability (ZSB-24002)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.17.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-24002 advisory. - Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for...

Zoom Client for Meetings < 5.17.0 Vulnerability (ZSB-24003)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.17.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-24003 advisory. - Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for...

VulnCheck KEV: CVE-2024-1709

ConnectWise ScreenConnect contains an authentication bypass vulnerability that allows an attacker with network access to the management interface to create a new, administrator-level account on affected devices...

Zoom VDI Meeting Client < 5.17.5 Vulnerability (ZSB-24003)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.17.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-24003 advisory. - Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for...

Zoom VDI Meeting Client < 5.17.5 Vulnerability (ZSB-24006)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.17.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-24006 advisory. - Business logic error in some Zoom clients may allow an authenticated user to conduct information disclosure via network...

PT-2024-3451 · Oracle +5 · Mysql Server +4

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 8.0.34 and prior Description: The issue allows a high privileged attacker with network access via multiple protocols to compromise the MySQL Server. Successful attacks can result in unauthorized ability to cause a...

PT-2024-3452 · Oracle +5 · Mysql Server +4

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.34 and prior Description: The issue is related to insufficient access control in the MySQL Server product of Oracle MySQL, specifically in the Server: DML component. This allows a high-privileged attacker with networ...

PT-2024-3454 · Oracle +5 · Mysql Server +4

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.34 and prior Description: The issue allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server, resulting in unauthorized ability to cause a hang or frequently repeatable...

PT-2024-3530 · Oracle +5 · Mysql Server +4

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.35 and prior Description: The issue is related to the Server: Optimizer component of Oracle MySQL Server and is caused by inadequate access control. It allows a high-privileged attacker with network access via multip...

PT-2024-3532 · Oracle +5 · Mysql Server +4

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.35 and prior MySQL Server versions 8.2.0 and prior Description: The issue is related to the Server: Audit Plug-in component of Oracle MySQL Server and is caused by inadequate access control. It allows a high-privileg...

RHEL 8 : java-1.8.0-ibm (RHSA-2024:0866)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0866 advisory. IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IBM Java SE ...

GHSA-47G3-MF24-6559 Vulnerability affecting the org.openjfx:javafx-media maven component of the OpenJFX project

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JavaFX. Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and 21.3.8. Difficult to exploit vulnerability allows unauthenticated...

Vulnerability affecting the org.openjfx:javafx-media maven component of the OpenJFX project

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JavaFX. Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and 21.3.8. Difficult to exploit vulnerability allows unauthenticated...

CVE-2024-20962

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL...

CVE-2024-20968

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Options. Supported versions that are affected are 8.0.34 and prior and 8.1.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2024-20972

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

CVE-2024-20949

Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite component: Outcome-Result. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Custom...

CVE-2024-20947

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite component: CRM User Management Framework. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...